CVE-2024-53582

This exploit demonstrates a directory traversal vulnerability in OpenPanel's File Manager 0.3.4 via the `view_file` endpoint. By manipulating the `filename` and `path_param` parameters, an attacker can access arbitrary files outside the intended directory, such as `/etc/shadow`.

This exploit demonstrates an incorrect access control vulnerability in OpenPanel 0.3.4, allowing unauthorized directory traversal via a crafted HTTP GET request. The request bypasses access controls to traverse directories using '../..' in the path.